Hello, I would like to setup a role in InsightIDR that would allow view only rights in most things but would not allow them to get notified of or be able to see any investigations.
One use case is to be able to search using the magnifying glass at the top of InsightIDR for a user name to see where a login is failing but not seeing anything at all with investigations. I was told this was not possible about a year ago. Is this still the case?
Any help is appreciated.
Thanks
Also keen on this functionality. Was a feature request raised do you know?
Investigations is tied to one of the IDR core roles, so you would need to not provide one of the IDR roles and only provide Log Search for example.
Without an IDR core role though the user wouldn’t be able to see user/asset pages either.
David
Hi, I did not fill out a feature request.
Unfortunately seeing the user/asset pages are what we need for these users to find out what is locking out a user account for example.
Thanks for replying.
Surely log search would be sufficient if the goal was to look at account lockouts?